This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer File: CqLxIFVT-llg8YBcbtk4np4NySw.cer (raw, json) Hash identifier: fY3SbyZqd5IvC8kU0VFoF4z/8u5s4YZurZHIidhW4mY= Subject key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB662CA1376A2C0F9C18DD7287A742 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.105.64.0/22 IP: 2a09:fd40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:66:2c:a1:37:6a:2c:0f:9c:18:dd:72:87:a7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6b:51:62:bd:e4:7e:10:2a:0c:d9:10:d6:c0: 54:ba:6d:bc:da:ab:16:2a:fa:12:8f:6e:67:95:d7: e6:96:6a:09:45:20:b8:6f:a3:a6:a2:6a:9e:6b:f9: 6c:eb:36:1e:a1:c9:db:ad:60:ce:2b:b9:54:6a:e8: f2:4e:83:1d:6a:1c:e1:30:f5:7a:90:d7:d5:4f:40: 07:4e:dc:15:10:51:11:0d:20:12:75:2e:f4:39:3d: bb:f5:a2:aa:f8:91:20:80:17:78:6e:24:20:aa:a8: 1d:ae:6e:23:e3:01:09:64:67:d9:1f:8e:0e:9b:8f: 05:d4:f5:43:9f:03:12:27:5c:ee:28:33:95:96:5c: 0e:2f:d9:ee:91:50:f9:e5:b7:19:e4:81:22:8f:51: fb:28:91:77:b0:84:65:a7:3e:fb:8e:21:af:bb:35: de:2d:d1:1f:59:88:c7:e7:83:cf:c4:c7:05:12:ac: e6:ec:13:95:8c:95:91:71:e2:f9:58:61:58:64:1e: 0c:98:af:9b:c2:63:04:8e:97:8a:9e:d8:0b:06:8e: 14:bb:b9:94:e4:8f:59:b4:3a:9e:02:d0:68:cc:41: e6:56:f3:e1:0e:4e:95:6d:45:7f:7d:e8:9c:c9:26: 39:91:fa:fc:85:e2:ca:bd:a9:13:a6:c9:69:8c:67: c4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.105.64.0/22 IPv6: 2a09:fd40::/29 Signature Algorithm: sha256WithRSAEncryption 09:6a:04:e8:27:db:8c:73:2e:e1:9b:ca:bb:f6:a6:ce:24:24: 14:a2:1a:9d:c3:3a:f8:0c:77:64:62:b6:3e:5a:54:85:3a:f7: 07:a6:69:fa:4c:28:da:59:93:67:e2:2a:1b:98:ca:ea:84:06: 3b:24:7c:25:49:30:1d:43:ec:e9:5e:74:a7:61:52:c0:81:27: fe:9f:dd:8a:b4:6c:59:35:82:2e:49:fb:ca:4f:a1:cf:5c:b5: db:52:3e:a9:6b:10:f8:76:68:6d:cd:a1:e1:fa:2f:01:70:49: 29:e6:ec:c8:c5:fa:53:48:d3:27:4e:34:5e:5f:93:cc:9b:49: 3b:97:1d:b3:0f:c3:25:fe:bd:f2:f3:cd:02:af:61:21:c6:72: ff:51:8e:39:a0:9b:7d:b2:b6:14:2d:c8:d5:d7:46:03:99:82: a5:8c:c3:76:66:38:c7:00:ff:ec:45:a7:66:63:37:87:ac:e3: 31:da:18:8b:52:10:1b:f0:2b:c5:0a:c9:b1:3a:52:e2:be:9f: 6b:a2:99:b8:0b:75:53:83:a3:85:bd:84:c7:ef:7e:ac:2a:60: 03:95:b3:e5:58:35:39:b2:16:78:8c:21:01:39:bf:d8:d2:c1: ee:9e:c4:68:ac:28:98:03:f8:ef:48:cd:16:cc:3c:b2:13:0b: cd:b2:33:7f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9y2YsoTdqLA+cGN1yh6dCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWEyZjEyMDU1NTNmYTU5NjBmMTgwNWM2ZWQ5Mzg5ZTllMGRjOTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWtRYr3kfhAqDNkQ1sBUum282qsW KvoSj25nldfmlmoJRSC4b6Omomqea/ls6zYeocnbrWDOK7lUaujyToMdahzhMPV6 kNfVT0AHTtwVEFERDSASdS70OT279aKq+JEggBd4biQgqqgdrm4j4wEJZGfZH44O m48F1PVDnwMSJ1zuKDOVllwOL9nukVD55bcZ5IEij1H7KJF3sIRlpz77jiGvuzXe LdEfWYjH54PPxMcFEqzm7BOVjJWRceL5WGFYZB4MmK+bwmMEjpeKntgLBo4Uu7mU 5I9ZtDqeAtBozEHmVvPhDk6VbUV/feicySY5kfr8heLKvakTpslpjGfELQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFAqi8SBVU/pZYPGAXG7ZOJ6eDcksMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzY0ZTQ0 Mi0xMzdlLTQxMDEtYmI2Yy1iMDY4MzE1OTY0NDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvNjRlNDQy LTEzN2UtNDEwMS1iYjZjLWIwNjgzMTU5NjQ0OS8xL0NxTHhJRlZULWxsZzhZQmNi dGs0bnA0TnlTdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWlAMA0EAgACMAcDBQMqCf1AMA0GCSqGSIb3 DQEBCwUAA4IBAQAJagToJ9uMcy7hm8q79qbOJCQUohqdwzr4DHdkYrY+WlSFOvcH pmn6TCjaWZNn4iobmMrqhAY7JHwlSTAdQ+zpXnSnYVLAgSf+n92KtGxZNYIuSfvK T6HPXLXbUj6paxD4dmhtzaHh+i8BcEkp5uzIxfpTSNMnTjReX5PMm0k7lx2zD8Ml /r3y880Cr2EhxnL/UY45oJt9srYULcjV10YDmYKljMN2ZjjHAP/sRadmYzeHrOMx 2hiLUhAb8CvFCsmxOlLivp9ropm4C3VTg6OFvYTH736sKmADlbPlWDU5shZ4jCEB Ob/Y0sHunsRorCiYA/jvSM0WzDyyEwvNsjN/ -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:46 2026 by rpki-client